This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS27347.roa
File:                     AS27347.roa (raw, json)
Hash identifier:          Yl1so1pGSSpA0wo5N+0/tYUH5oM8gOEFjNjcKBicw9g=
Subject key identifier:   CD:B9:13:08:FB:2E:E4:99:09:59:C5:34:D1:A2:F9:75:A5:95:AF:23
Certificate issuer:       /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial:       5F865627C8B09A0C228D69A5CB1D490CDAE013FA
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS27347.roa
Signing time:             Mon 19 Jan 2026 22:55:34 +0000
ROA not before:           Mon 19 Jan 2026 22:50:34 +0000
ROA not after:            Mon 18 Jan 2027 22:55:34 +0000
asID:                     27347
IP address blocks:        89.116.108.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
                          rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 11:19:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:86:56:27:c8:b0:9a:0c:22:8d:69:a5:cb:1d:49:0c:da:e0:13:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
        Validity
            Not Before: Jan 19 22:50:34 2026 GMT
            Not After : Jan 18 22:55:34 2027 GMT
        Subject: CN=CDB91308FB2EE4990959C534D1A2F975A595AF23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:b9:60:b3:32:41:af:c9:a4:f0:16:ee:b8:21:
                    a0:33:1b:75:b5:36:6a:30:72:bd:58:82:94:69:7b:
                    cf:a9:e6:e6:a4:59:1c:ca:14:fc:a6:29:9c:da:b1:
                    e1:69:d5:2e:96:41:a3:fa:14:5f:17:76:ba:6b:e4:
                    19:d8:61:b0:4f:1a:ed:e2:a9:46:ac:29:03:ac:d4:
                    9f:90:c0:4a:cc:ee:d4:b3:26:cb:c6:75:68:65:88:
                    57:23:ec:72:56:5a:03:65:e9:fd:c5:45:44:53:1f:
                    b9:6a:6c:b8:c4:85:11:cc:78:6f:9e:fe:89:6f:20:
                    78:1d:43:8b:97:91:23:29:e2:83:96:09:7d:e7:a3:
                    a0:5c:32:0f:d3:c4:96:bc:66:a0:d5:b8:65:3c:f7:
                    0d:76:10:c6:1b:17:f7:15:53:35:7e:58:a1:0b:9e:
                    c5:72:65:57:ff:c6:7f:1c:b4:cc:92:9c:be:dd:7d:
                    f1:0c:7e:f1:37:54:05:de:0b:7b:7b:65:5e:a8:49:
                    c0:e8:5a:87:0f:c6:62:a3:47:b8:1d:2b:3d:0f:93:
                    7c:91:32:fa:17:82:68:33:52:04:56:71:d1:45:94:
                    cb:bd:08:b7:a4:19:e2:9b:5e:bf:21:a3:46:e5:97:
                    83:d6:ed:2e:0f:0f:2e:d9:eb:a7:e2:9b:ca:12:26:
                    23:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:B9:13:08:FB:2E:E4:99:09:59:C5:34:D1:A2:F9:75:A5:95:AF:23
            X509v3 Authority Key Identifier:
                keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS27347.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.116.108.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:de:96:f4:56:a9:10:b3:c7:2a:8e:92:77:be:28:ee:81:10:
         72:00:8f:ce:68:d7:6e:98:66:f4:f0:64:e9:f4:90:d2:8f:47:
         a0:f0:87:c6:9b:df:2b:64:1f:68:b8:b2:b3:89:91:c0:77:a6:
         35:53:97:bd:1c:55:5f:7e:34:33:f2:e2:4b:f0:a6:ff:34:3b:
         44:5d:66:48:c1:12:26:b4:dc:cc:14:aa:92:65:49:1d:f7:04:
         08:7e:85:45:fe:40:00:cd:7f:c7:e5:51:84:39:9b:a6:ca:04:
         bd:96:a2:45:23:12:73:b0:03:b3:35:31:b2:15:be:33:8d:d1:
         9e:43:a7:b1:fa:30:51:e2:90:e1:af:5a:84:36:f5:64:c6:b9:
         37:2d:d8:44:ad:bd:8c:c4:e9:2a:ee:27:71:30:08:ec:7b:e5:
         f9:a1:e0:62:39:5f:39:b0:43:57:39:a5:67:fa:80:52:21:27:
         46:31:f8:62:f0:eb:4d:1e:4d:a1:30:e7:be:07:23:2e:69:7d:
         71:61:fd:a1:e0:c0:5a:f1:65:19:73:60:65:c3:b9:65:37:85:
         b7:82:29:55:5d:28:cb:fb:64:68:86:39:57:60:30:9b:61:0f:
         34:3f:ed:53:c6:15:b3:4f:a2:5c:96:5c:2b:73:60:9b:ad:9d:
         1f:24:ab:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 02:50:04 2026 by rpki-client